CVE-2023-7050: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file user/profile.php. The manipulation of the argument name/email leads to cross site scripting. The attack can be launche...

CVE-2023-48124

Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component...

PT-2023-30709

Name of the Vulnerable Software and Affected Versions SUP Online Shopping version 1.0 Description The issue allows a remote attacker to execute arbitrary code via the Name, Email, and Address parameters in the "Register New Account" component. This enables the attacker to perform Cross Site...

CVE-2021-34207

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

Cross site scripting

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

CVE-2021-34207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 Important Update, new UI allows attackers to execute arbitrary JavaScript by modifying the "Domain Name" field, "Server Address" field, "User Name/Email", or "Password/Key" field...

PT-2021-20400

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version V1.1.1-B20200824 Description: The issue allows attackers to execute arbitrary JavaScript by modifying the Domain Name field, Server Address field, User Name/Email, or Password/Key field in the ddns.htm file. This enabl...